RFR 8077102: dns_lookup_realm should be false by default
Weijun Wang
weijun.wang at oracle.com
Wed May 13 14:16:08 UTC 2015
Hi All
Please take a look at
http://cr.openjdk.java.net/~weijun/8077102/webrev.00/
Before this fix, dns_lookup_realm true is by default. This is not
consistent with other krb5 vendors. It also leads to lot of time waste
when Kerberos 5 is not configured at all.
The no-krb5.conf test case in ConfPlusProp.java is removed because with
dns_lookup_kdc still being true by default, the test can timeout on some
systems.
Thanks
Max
More information about the security-dev
mailing list